CrowdStrike
CCFR-201B · Question #49
Within the MITRE-Based Falcon Detections Framework, what is the correct way to interpret Keep Access > Persistence > Create Account?
Sign in or unlock CCFR-201B to reveal the answer and full explanation for question #49. The question stem and answer options stay visible for context.
MITRE ATT&CK Framework
Question
Within the MITRE-Based Falcon Detections Framework, what is the correct way to interpret Keep Access > Persistence > Create Account?
Options
- AAn adversary is trying to keep access through persistence by creating an account
- BAn adversary is trying to keep access through persistence using browser extensions
- CAn adversary is trying to keep access through persistence using external remote services
- DAn adversary is trying to keep access through persistence using application skimming
Unlock CCFR-201B to see the answer
You've previewed enough free CCFR-201B questions. Unlock CCFR-201B for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#MITRE ATT&CK#persistence#create account#Falcon detection taxonomy